elars/copnix
1
0 Fork 0
mirror of https://github.com/elwrcl/copnix.git synced 2026-10-31 14:28:02 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix: zapret firewall rules

Browse Source
This commit is contained in:
elwrcl committed 2026-03-31 00:49:30 +03:00
1 parent bd9719e938
commit 5b1c526e6a
1 file changed
+4 -5
Download Patch File Download Diff File Expand all files Collapse all files
nixos/networking/vpn/default.nix
+4 -5
View File
@@ -26,9 +26,8 @@
networking.enableIPv6 = false; networking.enableIPv6 = false;
networking.firewall.extraCommands = '' networking.firewall.extraCommands = ''
iptables -I OUTPUT -p tcp -m multiport --dports 80,443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass iptables -D OUTPUT -p tcp -m multiport --dports 80,443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass || true
iptables -I OUTPUT -p udp --dport 443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass iptables -D OUTPUT -p udp --dport 443 -m connbytes --connbytes-dir=original --connbytes-mode=packets --connbytes 1:9 -j NFQUEUE --queue-num 200 --queue-bypass || true
iptables -I OUTPUT -m mark --mark 0x40000000/0x40000000 -j RETURN iptables -D OUTPUT -m mark --mark 0x40000000/0x40000000 -j RETURN || true
''; '';
}
networking.firewalls